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Exhibit D 
tzlbac!4 . log 



SQL> @tzlbacl4 
SQL> 

SQL> CONNECT SCOTT/TIGER 

Connected. 

SQL> 

SQL> CREATE TABLE abc 

2 (COL1 VARCHAR2 (45) ) ; 

Table created. 

SQL> 

SQL> CREATE TABLE j ing 
2 (COL1 VARCHAR2 (45) ) ; 

Table created. 

SQL> 

SQL> GRANT ALL ON abc TO LBACSYS; 

Grant succeeded. 

SQL> 

SQL> -- This should not be allowed as the user is SCOTT 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 simple 1 , 1 lbac$testl ' 

BEGIN LBAC_SYSDBA . CREATE_POLICY ( 1 simple 1 , 1 lbac$testl ' , ' raghu ' ) 



ERROR at line 1: 

ORA-06550: line 1, column 7: 

PLS-00201: identifier 1 LBACSYS . LBAC_SYSDBA 1 must be declared 
ORA-06550: line 1, column 7: 
PL/SQL: Statement ignored 



SQL> 

SQL> CONNECT LBACSYS /LBACSYS 
Connected . 

[START: CLAIMS 1 and 21 
Shows a plurality of label-based policies that are created in the database; 
parameter is the policy column name] 

SQL> 

SQL> -- Create policies in database 
SQL> 

SQL> EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' simple ' , 1 lbac$testl 1 , ' raghu ' ) ; 
PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_3YSDBA. CREATE_POLICY ( ' complex ' , 1 lbac$testl ' , 1 rghu 1 ) ; 
PL /SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA. CREATE_POLICY ( 1 sile ' , 1 lbac$testl ' ) ; 
PL/SQL procedure successfully completed. 



, 1 raghu ' ) ; 
; END; 



[END: CLAIMS 1 and 21] 



SQL> 

SQL> -- Error Conditions 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY (' complex ' , 'lbac$testl' , ' aghu ' ) ; 
BEGIN LBAC_SYSDBA. CREATE_POLICY ( 1 complex 1 , ' lbac$testl ' , 1 aghu 1 ) ; END; 



ERROR at line 1: 

ORA-12447: policy role already exists for policy complex 
ORA-06512: at " LBACSYS . LBAC_STANDARD " , line 0 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line .* 

ORA-01921: role name 1 COMPLEX_DBA ' conflicts with another user or role name 
ORA-06512 : at line 1 



SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' dummy ' , 1 lbac$testl ' ) ; 
BEGIN LBAC_SYSDBA . CREATE_POLICY ( 1 dummy 1 , 1 lbac$testl 1 ) ; END; 



ERROR at line 1: 

ORA-12442: policy column "TESTLABEL" already used by an existing policy 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line . * 
ORA-06512: at line .* 



SQL> EXECUTE LB AC_SYSDBA . CREATE_POLICY ( ' new ' , 1 lbac$testl 1 , ' raghu 1 ) ; 
BEGIN LBAC_SYSDBA.CREATE_POLICY( 'new' , ' lbac$testl' , 'raghu' ) ; END; 



ERROR at line 1: 

ORA-12442: policy column "RAGHU" already used by an existing policy 
ORA-06512: at "LBACSYS . LB AC_SYSDBA" , line .* 
ORA-06512: at line . * 



SQL> EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' newl23 ' , 'lbac$ttl' , ' xyz 1 ) ; 
BEGIN LBAC_SYSDBA.CREATE_POLICY( 'newl23 ' , 1 lbac$ttl 1 , 'xyz' ) ; END; 



ERROR at line 1: 

ORA-12412: policy package lbac$ttl is not installed 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line . * 
ORA-06512: at line .* 



SQL> 

SQL> This should not fail ... 
SQL> EXECUTE 

LBAC_SYSDBA. CREATE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyzl234 ' , ' lbac$testl ' , 1 f df ' ) ; 

PL/ SQL procedure successfully completed. 

SQL> 

SQL> EXECUTE 

LBAC_SYSDBA.CREATE_POLICY( 1 abcdef ghi j klmnopqrstuvwxyz 1 , 'lbac$testl' , • f df ' ) ; 
BEGIN 

LBAC_SYSDBA.CREATE_POLICY( 'abcdef ghi j klmnopgrstuvwxyz' , ' lbac$testl ' , 1 f df 1 ) ; END; 



ERROR at line 1: 

ORA-12447: policy role already exists for policy abcdef ghi j klmnopqrstuvwxyz 
ORA-06512: at "LBACSYS . LBAC_STANDARD" , line 0 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line .* 

ORA-01921: role name ■ ABCDEFGHI JKLMNOPQRSTUVWXYZ_DBA ' conflicts with another 
user or role name 
ORA-06512: at line 1 



SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 india ' , 1 lbac$testl 1 , ' fdfefg' ) ; 

PL/ SQL procedure successfully completed. 

SQL> 

SQL> -- Add 5 policies due to max_label_policies default increase from 5 to 
SQL> EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' abl ' , 1 lbac$testl 1 , ' vcl 1 ) ; 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 ab2 1 , ' lbac$testl 1 , ' vc2 1 ) ; 
PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' ab3 ' , ' lbac$testl ' , 'vc3 1 ) ; 
PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 ab4 1 , ' lbac$testl 1 , ' vc4 ■ ) ; 
PL/ SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( ' ab5 1 , 1 lbac$testl 1 , ' vc5 1 ) ; 

PL/SQL procedure successfully completed. 

SQL> 

SQL> -- Error Conditions 

SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 abc ' , ' lbac$testl' , 'vex') ; 
BEGIN LBAC_SYSDBA.CREATE_POLICY( 'abc 1 , ■ lbac$testl 1 , 'vex' ) ; END; 



ERROR at line 1: 

ORA-12422: max policies exceeded 

ORA-06512: at " LBACSYS . LBAC_SYSDBA" , line .* 

ORA-06512: at line 1 



SQL> EXECUTE LBAC_SYSDBA . CREATE_POLICY (' simple 1 ) ; 
BEGIN LBAC_SYSDBA . CREATE_POL I CY ( ' simple 1 ) ; END ; 



ERROR at line 1: 

ORA-06550: line 1, column 7: 

PLS-00306: wrong number or types of arguments in call to 1 CREATE_POLICY 
ORA-06550: line 1, column 7: 
PL/ SQL ; Statement ignored 



SQL> EXECUTE 

LBAC_SYSDBA.CREATE_POLICY( ' abcdef ghi j klmnopqrs tuvwxyz 12 34 5 ' , 1 lbac$testl ' , 1 ragu ' ) 
BEGIN 

LBAC_SYSDBA.CREATE_POLICY ( ' abcdef ghi j klmnopqrs tuvwxyz 1234 5 1 , ' lbac$testl 1 , 1 ragu' ) 
; END; 



ERROR at line 1: 

ORA-12447: policy role already exists for policy 
abcde f ghi j klmnopqrs tuvwxyz 12 3 4 5 

ORA-06512: at "LBACSYS . LBAC_STANDARD " , line 0 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line .* 

ORA- 01921: role name ' ABCDEFGHI JKLMNOPQRSTUVWXYZ_DBA ' conflicts with another 
user or role name 
ORA-06512: at line 1 



SQL> 

SQL> -- Drop extra 5 policies from above. 
SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 abl ' ) ; 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( ' ab2 1 ) ; 

PL/ SQL procedure successfully completed. 

SQL> EXECUTE LBAC_S YSDBA . DROP_POLICY ( ' ab3 ' ) ; 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( ' ab4 ' ) ; 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 ab5 ' ) ; 

PL/SQL procedure successfully completed. 

[START: CLAIMS .1 and 21 - list of policies created] 

SQL> -- Let us check the policies created . . . 

SQL> SELECT * 

2 FROM DBA_LBAC_POLICIES 

3 ORDER BY POLICY_NAME; 

POL I CY_NAME COLUMN_NAME 



PACKAGE BIN_SIZE STATUS 



DEFAULT_FORMAT POLICY_FORMAT 



POLICY_OPTIONS 



DAT ABAS E_L ABE L S 



ABCDEFGHI JKLMNOPQRSTUVWXYZ12 34 FDF 
LBAC$TEST1 



COMPLEX 
LBAC$TEST1 



1 ENABLED 



INDIA 

POLICY_NAME 
PACKAGE 

D E F AUL T_F 0 RM AT 
POLICY_OPTIONS 
DATABASE_LABELS 
LBAC$TEST1 



FDFEFG 
COLUMN_NAME 

BINJ3IZE STATUS 
POLI CY_FORMAT 



1 ENABLED 



SILE 

LBAC$TEST1 



TESTLABEL 



1 ENABLED 



SIMPLE 
LBAC$TEST1 

POLICY_NAME 

PACKAGE 

DEFAULT_FORMAT 
POLICY_OPTIONS 
DATABASE LABELS 



RAGHU 

1 ENABLED 
COLUMN_NAME 

BIN_SIZE STATUS 
POLICY FORMAT 



5 rows selected. 
[END: CLAIMS 1 and 21] 

SQL> 

SQL> EXECUTE LBAC_SYSDBA . ENABLE_POLICY ( ' simple ' ) ; 

[STEP 101: "Simple" policy is enabled; STEPS 101-104 illustrate how it is 
determined "whether to perform [an] operation on a row of a table based on a set 
of labels associated with the row, the set of labels corresponding to the policy 
set", as recited by Claims 1 and 21.] 



PL/ SQL procedure successfully completed. 



SQL> 

SQL> -- The basic objective from now on is to test the enable/disable procedures 
SQL> 

SQL> EXECUTE LBAC_LABEL_ADMIN . CREATE_LABEL ( ' simple 1 , 1 , 1 A, B 1 , TRUE) ; 
[STEP 102: Label "A, B" is associated with policy "simple".] 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_LABEL_ADMIN . CREATE_LABEL ( 1 abcdef ghi jklmnopqrstuvwxyz ■ , 2 , ' A 1 , 
TRUE) ; 

BEGIN LBAC_LABEL_ADMIN . CREATE_LABEL ( ' abcdef ghi j klmnopqrstuvwxyz 1 , 2 , 1 A 1 , TRUE) ,- 
END; 



ERROR at line 1: 

ORA-12416: policy abcdef ghi j klmnopqrstuvwxyz not found 
ORA-06512: at "LBACSYS . LBAC_CACHE" , line .* 
ORA-06512: at " LBACSYS . LBAC_LABEL_ADMIN" , line .* 
ORA-06512: at line 1 

SQL> 

SQL> EXECUTE 

LBAC_USER_ADMIN . SET_USER_LABELS ( 1 abcdef ghi j klmnopqrstuvwxyz 
ST . FROM_CHAR ( ' abcdef ghi j klmnopqrstuvwxyz 1 , NULL , 'A' ) ) ; 
BEGIN 

LBAC_USER_ADMIN . SET_USER_LABELS ( ' abcdef ghi j klmnopqrstuvwxyz 
ST . FROM_CHAR ( 1 abcdef ghi j klmnopqrstuvwxyz 1 , NULL , 1 A ' ) ) ; END ; 



ERROR at line 1 : 

ORA-01405: fetched column value is NULL 
SQL> 

SQL> SELECT * 

2 FROM DBA_LBAC_USER_LABELS ORDER BY USER_NAME , POLICY_NAME ; 
no rows selected 
SQL> 

SQL> -- Error Conditions 
SQL> EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , 1 SCOTT' , ' abc ' ) 

BEGIN 

LBAC_POLICY_ADMIN. APPLY_TABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz 1 , ' SCOTT 1 , 1 abc 1 ) 
; END ; 



ERROR at line 1: 

ORA-12416: policy abcdef ghi j klmnopqrstuvwxyz not found 
ORA-06512: at " LBACSYS . LBAC_CACHE " , line . * 
ORA-06512: at " LBACSYS . LBAC_POLICY_ADMIN " , line .* 
ORA-06512: at line 1 



1 , ' SCOTT ' , TO_LABEL_LI 
' , ' SCOTT 1 , TO_LABEL_LI 



[START: CLAIMS 1, 2, 5, 21, 22, and 2 5 

For CLAIMS 1 and 21, policy "complex" is applied to j ing and policies "complex" 
and "simple" are applied to table "abc" . 

For CLAIMS 2 and 22, a policy column is added when a policy is applied to a 
table (e.g. "abc"). (See next bolded section on this page). 

For CLAIMS 5 and 25, policy "complex" and "simple" are the two or more policies 
of the plurality of label -based policies of table "abc"] 

SQL> 

SQL> - - OK now 
SQL> EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY ( 'complex' , 'SCOTT' , 'abc' , ' NO_CONTROL 1 ) ; 
PL/ SQL procedure successfully completed. 
SQL> EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY( 'complex' , 'SCOTT' , ' j ing ' , ' NO_CONTROL ' ) ; 
PL/SQL procedure successfully completed. 
SQL> EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( ' simple ' , ' SCOTT 1 , ' abc ' , ' DELETE_CONTROL ' ) ; 
PL/ SQL procedure successfully completed. 
[END: CLAIMS 1, 2, 5, 21, 22, and 25] 

SQL> EXECUTE 

LBAC_POLICY_ADMIN. APPLY_TABLE_POLICY ( 'simple' , ' SCOTT 1 , ' EMP ' , ' DELETE_CONTROL ' ) ; 
PL/SQL procedure successfully completed. 
SQL> EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY( 'sile' , 'SCOTT' , 1 j ing 1 , ' DELETE_CONTROL ' ) ; 

PL/SQL procedure successfully completed. 

SQL> 

SQL> CONNECT SCOTT/TIGER 
Connected. 

[Step 103: User * SCOTT' connects to the database. Note: user 1 SCOTT is not 
associated with any labels.] 

[START: CLAIM 2, 5, 22 and 2 5 

For CLAIMS 2 and 22, policy columns "RGHU" and "RAGHU" are added for policies 
"complex" and "simple". 

For CLAIMS 5 and 25, these columns are added because policies "complex" and 
"simple" are applied - i.e. "the policy set associated with the table includes 
two or more policies of the plurality of label-based policies."] 

SQL> 

SQL> DESC abc; 
Name Null? Type 



COL 1 VARCHAR2 (45) 

RGHU LBACSYS . LBAC_LABEL 

RAGHU LBACSYS . LBAC_LABEL 



[END: CLAIM 2, 5, 2 2 and 2 5] 



SQL> 
SQL> 
2 



INSERT INTO abc (coll) 
VALUE'S ( ' f df d ' ) ; 



1 row created. 

[START: CLAIMS 3 and 2 3 

Label "A,B" for policy "simple" is stored in policy column "raghu" corresponding 
to the policy.] 

SQL> 

SQL> UPDATE abc 

2 SET raghu = LBACSYS . TO_LBAC_LABEL ( 1 simple 1 , 1 A, B ' ) ; 

1 row updated. 

[END: CLAIMS 3 and 23] 

[Step 104/START: CLAIMS 1, 4, 21 and 24 

For CLAIMS 1 and 21, the following delete operation is received. It was 
previously shown which policies apply to table "abc". Here, only policy "simple" 
is enforced on delete because DELETE_CONTROL is only specified for policy 
"simple" even though both policies "simple" and "complex" are applied. Thus, 
policy "simple", of the plurality of label-based policies ("simple" and 
"complex"), was determined to be applied to table "abc". In this example, it is 
determined that the delete operation is NOT performed based on the set of labels 
associated with the row (i.e. user "SCOTT" is not associated with any labels so 
the user is denied the ability to delete the row) . 

For CLAIMS 4 and 24, in order to determine which policies apply, it must be 
determined whether a column is a policy column] 
SQL> -- Should not allow . . . 
SQL> DELETE FROM abc ; 
DELETE FROM abc 

ERROR at line 1: 

ORA-12406: unauthorized SQL statement for policy SIMPLE 
ORA-06512: at "LBACSYS . LBAC_STANDARD " , line 0 
ORA-06512: at 11 LBACSYS . LB AC . * 

ORA-04088: error during execution of trigger 1 LBACSYS . LBAC . * 
[END: CLAIMS 1, 4, 21, and 24] 

[START: CLAIMS 3 and 23 

Shows that label "A, B" associated with policy "simple" is stored in policy 
column "raghu" of a row, in table "abc", with value "fdfd"] 

SQL> 

SQL> SELECT coll , LABEL_TO_CHAR (raghu) 

2 FROM abc 

3 ORDER BY coll; 

COL1 



LABEL_TO_CHAR (RAGHU) 



fdfd 
A, B 



1 row selected. 

[END: CLAIMS 3 and 23] 



SQL> 

SQL> -- Error Condition 

SQL> EXECUTE LBAC_SYSDBA . DISABLE_POLICY ( ' simple ' ) ; 
BEGIN LBAC_SYSDBA.DISABLE_POLICY ( ' simple ' ) ; END; 



ERROR at line 1: 

ORA-06550: line 1, column 7: 

PLS-00201: identifier 1 LBACSYS . LBAC_SYSDBA ' must be declared 
ORA-06550: line 1, column 7: 
PL/SQL: Statement ignored 



SQL> 

SQL> CONNECT LBACSYS /LBACSYS 

Connected. 

SQL> 

SQL> EXECUTE LBAC_SYSDBA. DISABLE_POLICY ( 1 simple 1 ) ; 

PL/SQL procedure successfully completed. 

SQL> 

SQL> -- Error Conditions . . . 

SQL> EXECUTE LBAC_SYSDBA . DISABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyzf d ' ) ; 
BEGIN LB AC_S YSDBA . D I S ABLE_POL I CY ( ' abcdef ghi j klmnopqrstuvwxyzf d 1 ) ; END ; 



ERROR at line 1: 

ORA-12416: policy abcdef ghi j klmnopqrstuvwxyzf d not found 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line .* 
ORA-06512: at line 1 



SQL> EXECUTE LBAC_SYSDBA . DISABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , ' fdf ' ) ; 
BEGIN LBAC_SYSDBA.DISABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , ' fdf 1 ) ; END; 



ERROR at line 1: 

ORA-06550: line 1, column 7: 

PLS-00306: wrong number or types of arguments in call to ' DISABLE_POLICY 1 
ORA-06550: line 1, column 7: 
PL/SQL: Statement ignored 

SQL> 

SQL> -- Should not delete as the disable will be effective from next session 

only 

SQL> DELETE FROM SCOTT. abc ; 
SQL> 

SQL> CONNECT SCOTT/TIGER 

Connected . 

SQL> 

SQL> SELECT coll , LABEL_TO_CHAR (raghu) 

2 FROM abc 

3 ORDER BY coll; 



no rows selected 



SQL> 

SQL> -- Should delete now as the policy is disabled . . . 
SQL> DELETE FROM abc; 

0 rows deleted. 
SQL> 

SQL> SELECT coll , LABEL_TO_CHAR (raghu) 

2 FROM abc 

3 ORDER BY coll; 

no rows selected 
SQL> 

SQL> INSERT INTO abc (coll) 
2 VALUES ( 1 123233 1 ) ; 

1 row created. 
SQL> 

SQL> -- Error Condition . . . 

SQL> EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( ' simple ' ) ; 
BEGIN LBAC_SYSDBA. ENABLE_POLICY ( 1 simple ' ) ; END ; 



ERROR at line 1: 

ORA-06550: line 1, column 7: 

PLS-00201: identifier 1 LBACSYS . LBAC_SYSDBA 1 must be declared 
ORA-06550: line 1, column 7: 
PL/SQL: Statement ignored 



SQL> 

SQL> CONNECT LBACSYS /LBACSYS 

Connected. 

SQL> 

SQL> EXECUTE LBAC_S YSDBA . ENABLE_POLICY ( 1 simple ' ) ; 

PL/ SQL procedure successfully completed. 

SQL> 

SQL> -- Error Conditions . . . 

SQL> EXECUTE LBAC_SYSDBA . ENABLE_POLICY { ' simplerl 1 ) ; 
BEGIN LBAC_S YSDBA. ENABLE_POL ICY ( ' simplerl ' ) ; END; 



ERROR at line 1: 

ORA-12416: policy simplerl not found 

ORA- 06512: at 11 LBACSYS . LBAC_S YSDBA " ., line . * 

ORA-06512: at line 1 



SQL> EXECUTE LBAC_SYSDBA. ENABLE_POLICY (' simple ', FALSE) ; 
BEGIN LBAC_SYSDBA. ENABLE_POLICY ( 1 simple 1 , FALSE) ; END; 



ERROR at line 1: 

ORA- 06550: line 1, column 7: 

PLS-003 06: wrong number or types of arguments in call to ' EHABLE_POLICY ' 
ORA-06550: line 1, column 7: 
PL/SQL : Statement ignored 

SQL> 

SQL> -- Should delete now as the enable will be effective only from new session 
SQL> DELETE FROM SCOTT. abc; 

1 row deleted. 

SQL> 

SQL> CONNECT SCOTT/TIGER 

Connected . 

SQL> 

SQL> -- Expecting no rows . . . 

SQL> SELECT coll , LABEL_TO_CHAR (raghu) 

2 FROM abc 

3 ORDER BY coll; 

no rows selected 
SQL> 

SQL> INSERT INTO abc (coll) 
2 VALUES ( 1 1232 1 ) ; 

1 row created. 

SQL> 

SQL> -- Delete should fail . . . 
SQL> DELETE FROM abc ; 
DELETE FROM abc 

ERROR at line 1: 

ORA-12406: unauthorized SQL statement for policy SIMPLE 
ORA-06512: at "LBACSYS . LBAC_STANDARD " , line 0 
ORA- 06512 : at "LBACSYS . LB AC . * 

ORA-04088: error during execution of trigger ' LBACSYS . LBAC . * 



SQL> 

SQL> SELECT coll , LABEL_TO_CHAR (raghu) 

2 FROM abc 

3 ORDER BY coll; 

COL1 



LABEL_TO_CHAR (RAGHU) 



1232 



1 row selected. 



SQL> 

3QL> CONNECT LBACSYS / LBACS YS 

Connected. 

SQL> 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 simple ' , TRUE) ; 
PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 complex 1 , FALSE); 

PL/SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA. DROP_POLICY ( 1 sile ' ) ; 

PL/ SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 abcdef ghi j klmnopqrstuvwxyzl2 34 ' ) ; 
PL/ SQL procedure successfully completed. 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY (' abcdef ghi j klmnopqrstuvwxyz ' ) ; 
BEGIN LBAC_SYSDBA. DROP_POLICY ( 1 abcdef ghi j klmnopqrstuvwxyz 1 ) ; END ; 



ERROR at line 1: 

ORA-12416: policy abcdef ghi j klmnopqrstuvwxyz not found 
ORA-06512: at "LBACSYS . LBAC_STANDARD " , line 0 
ORA-06512: at "LBACSYS . LBAC_SYSDBA" , line .* 
ORA-06512: at line 1 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 india ' ) ; 
PL/SQL procedure successfully completed. 

3QL> 

SOL> -- Error Conditions 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 adf d 1 ) ; 
BEGIN LBAC_SYSDBA.DROP_POLICY ( ' adfd 1 ) ; END; 



ERROR at line 1: 

ORA-12416: policy adfd not found 
ORA-06512: at "LBACSYS . LBAC_STANDARD" , line 0 
ORA-06512: at " LBACSYS . LBAC_SYSDBA" , line .* 
ORA-06512: at line 1 

SQL> EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 simple ' ,XYZ) ; 
BEGIN LBAC_SYSDBA.DROP_POLICY ( ' simple ' , XYZ) ; END; 

ERROR at line 1: 

ORA- 0655 0: line 1, column 40: 

PLS-00201: identifier 1 XYZ 1 must be declared 
ORA- 0655 0: line 1, column 7: 
PL/ SQL : Statement ignored 



SQL: 



SELECT * 

FROM DBA_LBAC_POLICIES 
ORDER BY POLICY_NAME; 



no rows selected 



SQL> 

SQL> CONNECT SCOTT/TIGER 

Connected . 

SQL> 

SQL> -- Simple policy was applied on two tables (abc,emp) the hidden column 
should 
SQL> -• 
SQL> -- 
option 
SQL> -• 
hidden 
SQL> 
SQL> 
SQL> 
Name 



be dropped as the TRUE option is set; Policy complex was applied to 
two tables (abc,jing) and hidden column should not be dropped as the 

was set to FALSE; Policy sile was applied to a table (jing) and the 

column should not be dropped as the default option is FALSE. 

DESC abc; 



Null? 



Type 



C0L1 
RGHU 



SQL> DESC jing; 
Name 



VARCHAR2 (45) 
LBACSYS . LBAC_LABEL 



C0L1 
RGHU 

TESTLABEL 



VARCHAR2 (45) 
LBACSYS . LBAC_LABEL 
LBACSYS. LBAC LABEL 



SQL> DESC EMP; 
Name 



Null? 



Type 



EMPNO 



JOB 
MGR 

HIREDATE 
SAL 
COMM 
DEPTNO 



NOT NULL NUMBER (4) 

VARCHAR2 (10) 
VARCHAR2 (9) 
NUMBER (4) 
DATE 

NUMBER (7 ,2) 
NUMBER (7, 2) 
NUMBER (2) 



SQL> 

SQL> DROP TABLE abc; 
Table dropped. 
SQL> DROP TABLE jing; 
Table dropped. 



SQL> 

SQL> SET ECHO OFF 



